CVE-2005-1009

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 57.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-02 · updated 2026-06-16

Description

Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.

Affected products

Bakbone Netvault: 7.0, 7.1

References

http://secunia.com/advisories/14814
http://securitytracker.com/id?1013625
http://www.class101.org/netv-locsbof.pdf
http://www.class101.org/netv-remhbof.pdf
http://www.hat-squad.com/en/000164.html
http://www.hat-squad.com/en/000165.html
http://www.securityfocus.com/archive/1/394801
http://www.securityfocus.com/bid/12967
https://exchange.xforce.ibmcloud.com/vulnerabilities/19932
http://secunia.com/advisories/14814
http://securitytracker.com/id?1013625
http://www.class101.org/netv-locsbof.pdf

Get alerted when CVE-2005-1009 or the next vulnerability affects your stack